CVE-2026-98437
En el kernel de Linux se ha resuelto la siguiente vulnerabilidad:
media: qcom: iris: fix runtime PM reference leaks
Usar pm_runtime_resume_and_get() en iris_enable_power_domains() para evitar la fuga de un contador de uso de runtime PM en caso de fallo.
Además, garantizar que pm_runtime_put_sync() se llame siempre en iris_disable_power_domains(), incluso cuando iris_opp_set_rate() falla, de modo que las referencias de runtime PM permanezcan equilibradas.
Traducción automática del texto original de NVD (en inglés).
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días
- 0.15 %
- Percentil entre todas las CVEs puntuadas
- 4
- Fecha de la puntuación
- 21/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-98437",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "bb8a95aa038e099f5ec82c466e996b006e05abd7",
"lessThan": "fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795",
"versionType": "git"
},
{
"status": "affected",
"version": "bb8a95aa038e099f5ec82c466e996b006e05abd7",
"lessThan": "7a52e76b63095e05d92f15f16f45421cab9789e1",
"versionType": "git"
},
{
"status": "affected",
"version": "bb8a95aa038e099f5ec82c466e996b006e05abd7",
"lessThan": "f87d7eda07fca21efe4b96169ae59007db46e60e",
"versionType": "git"
}
],
"programFiles": [
"drivers/media/platform/qcom/iris/iris_resources.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.15"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.15",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.18.53",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.7",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/media/platform/qcom/iris/iris_resources.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-10-18T15:16:53.490",
"references": [
{
"url": "https://git.kernel.org/stable/c/7a52e76b63095e05d92f15f16f45421cab9789e1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f87d7eda07fca21efe4b96169ae59007db46e60e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: qcom: iris: fix runtime PM reference leaks\n\nUse pm_runtime_resume_and_get() in iris_enable_power_domains()\nto avoid leaking a runtime PM usage count on failure.\n\nAlso ensure pm_runtime_put_sync() is always called in\niris_disable_power_domains(), even when iris_opp_set_rate()\nfails, so runtime PM references remain balanced."
}
],
"lastModified": "2026-10-19T10:18:51.853",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}